For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Danny_Arroyo's avatar
Danny_Arroyo
Icon for Cirrus rankCirrus
Feb 24, 2021

Export a list of all SSL VIPs that are not SSL on the backend

Hi All.

 

I am using a BIG IP LTM v15.1.0.4

 

I would like to export a list of VIPs (from the command line or GUI) that shows the following:

  1. VIPs that have a clientssl profile assigned and do not have a serverssl profile assigned.
  2. The list should contain the VIP Name, destination ip, clientssl profile name, pool name(s), pool member's ips:port

 

While I was able to export a list of VIPs using the command below, it wont let me show the Server SSL profile. Also I don't know how to filter it based on "clientssl=yes" and "serverssl=no".

"

tmsh show ltm virtual detail | grep -E "Virtual Server: | Destination | Ltm::Pool: | Ltm::Pool Member: | Ltm::ClientSSL Profile"

 

Any advice is appreciated

3 Replies

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Feb 25, 2021

    Have you tried this,

     

    https://devcentral.f5.com/s/articles/Export-Virtual-Server-Configuration-in-CSV-tmsh-cli-script?page=1

    • Danny_Arroyo's avatar
      Danny_Arroyo
      Icon for Cirrus rankCirrus
      Feb 25, 2021

      Hi Jaikumar,

       

      Looks promising. Ill try this script today and reply back

       

      Thanks!!

       

      • jaikumar_f5's avatar
        jaikumar_f5
        Icon for Noctilucent rankNoctilucent
        Feb 26, 2021

         

        Glad could be help, if your question is solved, please do mark the thread as closed, so others can get similar solutions.